VMCA2022 · Question #75
While deciding which transport mode to use for the proxies, you notice that one of the requirements is support the encrypted datastore in VMware. Which processing modes can you leverage for the backup
The correct answer is A. Network mode with Encryption (NBDSSL). B. Virtual Appliance (HotAdd) mode. E. Direct SMB.. To access encrypted datastores in VMware, you need to use a transport mode that supports encryption. The following transport modes support encryption: - Network mode with Encryption (NBDSSL): This mode uses an encrypted network connection between the backup proxy and the ESXi hos
Question
While deciding which transport mode to use for the proxies, you notice that one of the requirements is support the encrypted datastore in VMware. Which processing modes can you leverage for the backup proxies? (Choose 3)
Options
- ANetwork mode with Encryption (NBDSSL).
- BVirtual Appliance (HotAdd) mode.
- CNetwork (NBD) mode.
- DDirect SAN.
- EDirect SMB.
- FDirect NFS.
How the community answered
(55 responses)- A80% (44)
- C2% (1)
- D5% (3)
- F13% (7)
Explanation
To access encrypted datastores in VMware, you need to use a transport mode that supports encryption. The following transport modes support encryption: - Network mode with Encryption (NBDSSL): This mode uses an encrypted network connection between the backup proxy and the ESXi host to read and write data from the encrypted datastore. This mode does not require direct access to the datastore, but it can be slower than other modes due to network traffic and encryption overhead. - Virtual Appliance (HotAdd) mode: This mode uses a virtual backup proxy that runs on an ESXi host and attaches virtual disks of the encrypted VMs to itself using the VMware vSphere API. This mode requires that the backup proxy and the source VMs reside on the same datastore or on datastores that are accessible by the same ESXi host. This mode can offer better performance than network mode, but it can also cause SCSI reservation conflicts if multiple backup proxies access the same datastore simultaneously. - Direct SMB: This mode uses a physical backup proxy that accesses the encrypted datastore over the SMB protocol. This mode requires that the datastore is configured as an SMB share and that the backup proxy has read and write permissions on it. This mode can offer high performance and scalability, but it also requires additional configuration steps and security The following transport modes do not support encryption: - Network (NBD) mode: This mode uses an unencrypted network connection between the backup proxy and the ESXi host, which cannot access encrypted datastores. - Direct SAN: This mode uses a physical backup proxy that accesses the encrypted datastore over the SAN fabric, which cannot decrypt encrypted data. - Direct NFS: This mode uses a physical backup proxy that accesses the encrypted datastore over the NFS protocol, which does not support encryption.
Topics
Community Discussion
No community discussion yet for this question.